...
Federation affects the following Infoblox sites: cspportal.infoblox.com, support.infoblox.com, and sso.infoblox.com. Users with an email domain matching your federated domain sign into these sites using their federated credentials from your IdP.
...
This may occur if the test user does not already exist in Infoblox Cloud Services Portal. IdP group mapping doesn't affect test users, and they will not be automatically provisioned into Infoblox Cloud Services Portal.
...
If the users are not currently provisioned in Infoblox Cloud Services Portal, they will not be able to sign in to Infoblox Cloud Services Portal unless you have configured IdP group mapping. If you have already set up IdP group mapping, ensure that your user is a member of one of the IdP groups you specified in your configuration.
...